AES Encrypt/Decrypt

What is AES Encrypt/Decrypt?

This tool encrypts your text with AES-GCM 256, a modern authenticated cipher, using a key derived from your password with PBKDF2 (100,000 iterations). The same password can decrypt the stored value back, and everything runs in your browser with nothing uploaded.

Why is the output in three parts?

• Salt: random bytes that make the derived key unique even for the same password.
• IV: a fresh random initialization vector generated for every encryption.
• Ciphertext: the encrypted bytes plus an integrity tag so tampering is always detected.
• All three are base64-encoded and joined as base64(salt).base64(iv).base64(ciphertext); decrypt parses this exact format.

FAQ

• Can you decrypt my data? No — the password is required to derive the key, and encryption happens entirely in the browser; the tool never sees your plaintext or password.
• Why is it not instant? PBKDF2 runs 100,000 iterations on purpose to make brute-force attacks expensive; that delay is what keeps the encryption strong.
• A decrypt error says wrong password or bad format — what now? Either the password does not match, the value was edited, or the three base64 parts are missing.